$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/2be0b52e-7201-3119-bd68-08b8e4ff7bd6.roa File: 2be0b52e-7201-3119-bd68-08b8e4ff7bd6.roa (raw, json) Hash identifier: tPsrE+6TzD1RbQTZrRbpnO80N4/qw+5dpjI/pUpQOOY= Subject key identifier: B6:1C:F9:45:8A:74:07:EC:84:8A:3B:8C:1B:8E:41:69:4F:05:39:11 Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F4328584E00060C5598DB171D98150F40 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/2be0b52e-7201-3119-bd68-08b8e4ff7bd6.roa Signing time: Sat 30 May 2026 01:00:10 +0000 ROA not before: Sat 30 May 2026 01:00:10 +0000 ROA not after: Fri 28 Aug 2026 01:00:10 +0000 asID: 54113 IP address blocks: 157.5.68.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 04 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:00:06:0c:55:98:db:17:1d:98:15:0f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: May 30 01:00:10 2026 GMT Not After : Aug 28 01:00:10 2026 GMT Subject: CN=cf595ca3-3ec3-4799-9438-9e8f298502e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:b9:72:e0:5f:ec:14:ca:4e:ab:56:a8:a5:29: 32:55:ef:c5:0f:bc:85:68:d6:65:ca:91:e1:5a:e0: 9c:5f:53:55:ae:7c:33:3f:ec:cb:54:0b:a0:7f:17: 98:45:d6:b1:99:71:5d:f6:7c:78:02:b9:a0:e9:b5: 3f:8a:40:1a:c3:99:31:fe:81:c9:2e:70:d6:a7:81: 51:57:f8:95:81:26:29:58:59:15:a0:89:8c:d2:04: 97:56:ee:80:a3:93:eb:93:99:03:97:31:79:99:7b: d6:d1:54:0d:5e:e3:ac:6f:2b:53:78:89:c5:4f:58: 6e:a5:84:b2:c2:7d:43:be:38:16:67:ce:38:23:33: e6:e1:dc:03:a2:d5:0d:2c:0e:f5:87:9f:8f:23:b7: f6:40:21:a6:75:dc:4d:ae:81:e4:c4:97:52:37:ad: 19:26:a4:f3:69:57:fd:bf:c1:0c:65:ff:ec:e8:05: 15:b9:9a:0d:d1:38:b6:13:20:f2:12:e5:61:35:e0: 34:5e:4c:7e:25:8f:ae:03:9e:56:c0:a8:0d:8a:22: 4c:66:af:7b:22:03:e9:16:22:38:88:33:cb:7a:e7: 6f:93:28:b7:ac:b9:05:3d:12:12:07:41:21:05:8c: 85:33:16:ab:9d:30:d5:46:12:f6:72:4e:91:df:6e: da:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:1C:F9:45:8A:74:07:EC:84:8A:3B:8C:1B:8E:41:69:4F:05:39:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/2be0b52e-7201-3119-bd68-08b8e4ff7bd6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv4: 157.5.68.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:88:e3:6b:f5:7a:6f:12:f0:0b:0a:b5:37:3c:fa:4c:d0:c3: a7:eb:5b:3a:ee:38:27:85:2c:f0:d4:86:d9:74:40:76:1f:7e: 7b:52:52:14:4a:a1:ea:9a:42:60:00:7d:2a:fc:f9:1e:d2:33: d3:73:c8:99:3e:77:1f:41:a8:28:50:ce:f4:59:68:76:8d:98: bf:0d:f6:03:3d:3a:18:cb:e8:4f:c4:6b:a7:f3:13:72:73:72: 4c:12:2c:22:66:d9:c3:e3:77:09:f7:67:51:1f:14:5f:9d:f1: 6e:95:43:8c:49:51:0b:ac:79:3d:24:9b:70:64:d3:0e:a0:44: 39:c8:9b:0e:a8:00:5c:38:0c:7c:bc:54:6a:a7:10:85:db:25: f9:2b:9a:ec:8d:fd:17:5c:c8:36:fb:76:51:ef:2d:cc:0a:34: ea:25:f9:88:ed:c3:f1:cc:25:b1:bf:36:19:63:6a:db:a8:59: 69:f7:48:bb:17:ed:07:d2:a4:4e:31:92:0c:bc:08:5b:4c:7e: e2:e2:fb:43:18:ff:cf:a0:0e:4d:0f:db:b4:73:49:39:61:ba: fb:4d:20:62:5f:d0:cc:b1:d0:2c:5f:27:40:1b:a6:f4:9b:15: a7:14:5b:76:92:76:1e:b2:34:11:1c:b1:78:b9:6e:78:a9:d9: 3f:15:a6:c1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4ABgxVmNsXHZgVD0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI2MDUzMDAxMDAxMFoXDTI2MDgyODAxMDAxMFowLzEtMCsGA1UEAxMk Y2Y1OTVjYTMtM2VjMy00Nzk5LTk0MzgtOWU4ZjI5ODUwMmUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtLly4F/sFMpOq1aopSkyVe/FD7yFaNZlypHh WuCcX1NVrnwzP+zLVAugfxeYRdaxmXFd9nx4Armg6bU/ikAaw5kx/oHJLnDWp4FR V/iVgSYpWFkVoImM0gSXVu6Ao5Prk5kDlzF5mXvW0VQNXuOsbytTeInFT1hupYSy wn1DvjgWZ844IzPm4dwDotUNLA71h5+PI7f2QCGmddxNroHkxJdSN60ZJqTzaVf9 v8EMZf/s6AUVuZoN0Ti2EyDyEuVhNeA0Xkx+JY+uA55WwKgNiiJMZq97IgPpFiI4 iDPLeudvkyi3rLkFPRISB0EhBYyFMxarnTDVRhL2ck6R327auQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLYc+UWKdAfshIo7jBuOQWlPBTkRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvMmJlMGI1MmUtNzIwMS0z MTE5LWJkNjgtMDhiOGU0ZmY3YmQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBnQVEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA6I42v1em8S8AsKtTc8+kzQw6frWzruOCeFLPDUhtl0QHYffntSUhRK oeqaQmAAfSr8+R7SM9NzyJk+dx9BqChQzvRZaHaNmL8N9gM9OhjL6E/Ea6fzE3Jz ckwSLCJm2cPjdwn3Z1EfFF+d8W6VQ4xJUQuseT0km3Bk0w6gRDnImw6oAFw4DHy8 VGqnEIXbJfkrmuyN/RdcyDb7dlHvLcwKNOol+Yjtw/HMJbG/NhljatuoWWn3SLsX 7QfSpE4xkgy8CFtMfuLi+0MY/8+gDk0P27RzSTlhuvtNIGJf0Myx0CxfJ0AbpvSb FacUW3aSdh6yNBEcsXi5bnip2T8VpsE= -----END CERTIFICATE-----Generated at Tue Jun 2 22:05:45 2026 by rpki-client